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Amendments to the Claims: 

This listing of claims will replace all prior versions and listings of clainns in 
this application: 



Listing of Claims: 

1 . (Currently amended) A system for assisting a user conducting a 
transaction on a secure site of a server to implicitly logoff from the secure 
site , comprising: 

the server including: 

a secure transaction protection module that tracks a user's 

access state to the server; 

a database in communication with the secure transaction 
protection module, for storing data to be accessed by the user; 

an identification module for validating the user's access to the 
database; and 

a notification module for notifying the secure transaction protection 
module of a user's request to initiate a session on the server; [[and]] 

wherein if the user [[exits the secure site]] selects an insecure site while 
Inaaed on to the secure site of the server , the notification module_^ends a 
wamina notice to the user to alert the user of an impendinq^^^offirom the 
secure site, and further sends a termino tion command [[message]] to the 
secure transaction protection module for implicitly logging off the user from 
the secure siteiand V^c^^ ^^d^ 

Page 2 of 18 



Application Serial No.: 09/61 1 .934 Reply to Office action of: September 18 2003 

Amendment dated: Januar/ 1 5, 2004 Attorney Docket No.: ARC-00-0040-US1 

whftrfiir^ the secure transaction protection module causes the session to 
be terminated in response to the ternnination connmand, absent an 
instruction from the user to maintain a conne ction with the secure site. 

^^yz^Canceled) 

^ (Currently amended) The system according to claim [[2]] L wherein 
the secure transaction protection module [[sends a warning message to 
the user that the session will be terminated, and]] provides the user with 
[[the]] an option to set the time to termination. 

\. (Currently amended) The system according to claim [[2]] L wherein 
the secure transaction protection module sends a cookie with a short life to 
the notification module to terminate the session following the expiration of 
the cookie. 

^. The system according to claim [[2]] L wherein the secure site is a web 
site with an address; and 

wherein the user exits the secure site by transiting to another address. 

< / • 

^Currently amended) The system according to claim [[2]] |, wherein 
the transaction is on ebusiness transaction. 

h. (Original) The system according to claim 6, wherein the user accesses 
the secure site using a web browser. 



Pages of 18 



Application Serial No.: 09/61 1 ,934 Reply to Office action of: September 1 8, 2003 

Amendment dated: January 1 5, 2004 Attorney Docket No.: ARC-00-0040-US1 

(Original) The systenn according to clainn 7, wherein the notification 
module is innplennented on the web browser. 

f). (Currently amended) A computer program product for assisting a user 
conducting a transaction on a secure site of a server to implicitly logoff 
from the secure site , comprising: 
the server including: 

a secure transaction protection module that tracks a user's 
access state to the server; 

a database in communication with the secure transaction 
protection module, for storing data to be accessed by the user; 

an identification module for validating the user's access to the 
database; and 

a notification module for notifying the secure transaction protection 
module of a user's request to initiate a session on the server; [[and]] 

wherein if the user [[exits the secure site]] selects an in secure site while 
loaaed on to the secure site of the server , the notification module sends a 
warnina notice to the user to alert the user of an imoen dina logoff from the 
secure site, and further sends a termination command [[message]] to the 
secure transaction protection module for implicitly logging off the user from 
the secure site ; and 

wherein the secure transaction protection module ca uses the session to 
be terminated in response to the termination comman d, absent an 
instruction from the user to maintain a connection with the secure site. 
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yb. {^urrently amended) The connputer program product according to 
claim/9, wherein the secure transaction protection module [[issues a 
termination command to the notification module to cause the session to 
be terminated.]] provides the user with [[the]] an option to set the time to 
termination. 

(Currently amended) A method for implicitly logging off a user 
conducting a transaction on a secure site of a server from the secure site, 
comprising: 

tracking a user's access state to the server; 

storing data to be accessed by the user; 

validating the user's access to the database; 

notifying the secure transaction protection module of a user's request to 
initiate a session on the server; [[and]] 

wherein if the user [[exits the secure site]] selects an in secure site while 
loaaed on to the secure site of the server , [[issuing a command to implicitly 
log off the user from the secure site]] sendina a warning not ice to the user 
to alert the user of an impending logoff from the secur e site, and further 
issuing g termination command to the secure transact ion protection 
module for implicitly loaaina off the user from the secu re site; and 

causing the session to be terminated in response to the termination 
command, absent an instruction from the user to main tain a connection 
with the secure site . 

'M. (Canceled) 
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li. (Currently amended) The nnethod according to claim [[12, wherein 

issuing the command includes sending a warning message to the user that 

I"* 

the session will be terminated, and]] 1/1 . further comprising providing the 
user with [[the]] on option to set the time to termination. 

14. (Currently amended) The method according to claim [[12]] yi, 
wherein issuing the command includes sending a cookie with a short life to 
the notification module to terminate the session following the expiration of 
the cookie. 

1^. (Currently amended) The method according to claim [[12]] /]_. 
wherein exiting the secure site includes transiting to another site. 

l/. (Currently amended) The method according to claim [[12]] 
further including performing on ebusiness transaction. 

y. (Original) The method according to claim l/, wherein accessing the 
secure site includes using a web browser. 
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